Page MenuHomePhabricator

Tools: Migrate puppet roles from ldap to the new puppetbackend
Closed, ResolvedPublic

Description

I'm going to do this automatically for the rest of Labs, but Tools probably shouldn't be migrated per instance; instead we should set up reasonable prefixes so that there are settings for all exec nodes, lighttpd nodes, etc.

Event Timeline

Change 316923 had a related patch set uploaded (by Yuvipanda):
labs: Don't read roles from LDAP for all non-tools projects

https://gerrit.wikimedia.org/r/316923

Change 316923 merged by Andrew Bogott:
labs: Don't read roles from LDAP for all non-tools projects

https://gerrit.wikimedia.org/r/316923

btw, note that the Trusty nodes I just made (tools-exec-1411 through 1420) have their roles set via horizon. So you'll want to remove those after you set up the prefix.

Andrew added a subscriber: yuvipanda.

yuvi says "there's a list of prefixes in tools-clush-generator in ops/puppet"

Change 322730 had a related patch set uploaded (by Andrew Bogott):
Labs enc: Don't use ldap as a source for anything

https://gerrit.wikimedia.org/r/322730

Change 322730 merged by Andrew Bogott:
Labs enc: Don't use ldap as a source for anything

https://gerrit.wikimedia.org/r/322730

I created a bunch of tools- puppet prefixes in horizon, removed all of the per-node tools hiera files on wikitech, and patched the enc to ignore ldap.